AWS Security Advisories · September 2017 — AWS Security Advisories
9 advisories 13 CVEs 2 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2017-09. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2017-896

ALAS · AL1ExploitedVulnCheck KEV listedImportant2017-09-18

ALAS-2017-896: httpd24, httpd (important)

CVEs:CVE-2017-9798

Affected products

ProductStatusVendorPackageEcosystem
httpd24, httpd affected Amazon httpd24, httpd —
Upstream advisory

ALAS-2017-891

ALAS · AL1Coalition ESS < 30%Medium2017-09-13

ALAS-2017-891: GraphicsMagick (medium)

CVEs:CVE-2017-11403

Affected products

ProductStatusVendorPackageEcosystem
GraphicsMagick affected Amazon GraphicsMagick —
Upstream advisory

ALAS-2017-895

ALAS · AL1All remainingImportant2017-09-14

ALAS-2017-895: aws-cfn-bootstrap (important)

Affected products

ProductStatusVendorPackageEcosystem
aws-cfn-bootstrap affected Amazon aws-cfn-bootstrap —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.